Morele.net confirms it has received the decision from the President of the Personal Data Protection Office (UODO) concerning the 2018 cyberattack. However, the company disagrees with the UODO’s decision and intends to appeal it to the Provincial Administrative Court.
Morele.net has issued a strong statement regarding the latest decision from the President of the Personal Data Protection Office (UODO). The company asserts that the UODO failed to rectify a key irregularity highlighted by the Supreme Administrative Court (NSA) in its ruling that overturned the original decision.
Morele.net emphasizes that the UODO did not appoint an expert witness to objectively assess the adequacy of personal data safeguards used by the company in 2018. According to Morele.net, appointing such an expert is crucial for an independent and impartial evaluation of the company’s actions, especially given that the situation dates back over five years.
The company maintains that its security measures were carefully chosen, consistent with market practices, and compliant with GDPR requirements at the time of the incident.
Furthermore, Morele.net believes that the UODO President was not authorized to impose a higher penalty than the fine issued in the 2019 decision. The company argues that the circumstances of the case have not changed, and no new aggravating factors have emerged. On the contrary, some allegations against the company were overturned by the NSA’s ruling. Morele.net also contends that the method used by the UODO President to calculate the fine was arbitrary and not justified by GDPR provisions.